CVE-2007-5555

Unspecified vulnerability in Symantec Altiris Deployment Solution allows attackers to obtain authentication credentials via unknown vectors, aka "Authentication Credentials Information Leakage in Altiris Deployment Solution." NOTE: this description is based on a vague pre-advisory with no...

CARE2X php Integ Hospital Info System 2G Deployment 2.2 Multi Remote File Include

X---- w w w . u N k n 0 w n . e u ----X CARE2X php Integ Hospital Info System 2G Deployment 2.2 Multi Remote File Include ::Home: http://care2x.org/ http://sourceforge.net/projects/care2002/ ::Vuln Type : Remote File Include RFI ::Discovered by : iNs ::Vuln Code: /language/en/encopyrite.php ?php...

Authentication flaw

The login method in LoginModule implementations in Apache Geronimo 2.0 does not throw FailedLoginException for failed logins, which allows remote attackers to bypass authentication requirements, deploy arbitrary modules, and gain administrative access by sending a blank username and password with...

Altiris Deployment Solution Client Detection

Binary data 4178.prm...

Altiris Deployment Solution < 6.8 SP2 Aclient Log File Viewer Local Privilege Escalation

Binary data 4180.prm...

Altiris Deployment Solution Server Detection

Binary data 4179.prm...

Altiris Deployment Solution Aclient Process (aclient.exe) Log File Viewer Local Privilege Escalation

The version of the Altiris Client Agent aclient installed on the remote host reportedly contains a flaw whereby local users can use the Log File Viewer to open or execute files on the affected host with SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description...

CVE-2007-4380

Aclient in Symantec Altiris Deployment Solution 6 before 6.8 SP2 6.8.378 allows local users to gain local System privileges via the Log File Viewer...

Design/Logic Flaw

Aclient in Symantec Altiris Deployment Solution 6 before 6.8 SP2 6.8.378 allows local users to gain local System privileges via the Log File Viewer...

CVE-2007-4380

Aclient in Symantec Altiris Deployment Solution 6 before 6.8 SP2 6.8.378 allows local users to gain local System privileges via the Log File Viewer...

CVE-2007-4380

CVE-2007-4380 affects Symantec Altiris Deployment Solution 6.x prior to 6.8 SP2 (build 6.8.378) where the Aclient Log File Viewer enables local users to gain SYSTEM privileges. The vulnerability is described as a local privilege escalation via the Log File Viewer in the Altiris client (aclient). ...

Altiris Deployment Server Detection

The remote service is running the Deployment Server component of Altiris Deployment Solution, a product for centralized management of computer systems throughout an enterprise. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if descripti...

MS07-042: Description of the security update for Microsoft XML Core Services 6.0: August 14, 2007

None None...

Altiris Deployment Solution Elevation of Privilege

SUMMARY Symantecs Altiris Deployment Solution is vulnerable to an elevation of privilege attack. Severity Medium Remote Access | No ---|--- Local Access | Yes Authentication Required | Yes Exploit publicly available | No AFFECTED PRODUCTS Product | Version | Build | Solutions ---|---|---|---...

iDefense Security Advisory 07.17.07: IBM Tivoli Provisioning Manager for OS Deployment TFTP Blocksize DoS Vulnerability

IBM Tivoli Provisioning Manager for OS Deployment TFTP Blocksize DoS Vulnerability iDefense Security Advisory 07.17.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 17, 2007 I. BACKGROUND IBM Corp.'s Tivoli Provisioning Manager for OS Deployment is a network boot server that...

IBM Tivoli Provisioning Manager for OS Deployment TFTP server DoS

Devision by zero on invalid blksize argument...

IBM Tivoli Provisioning Manager for OS Deployment TFTPD Malformed PRQ Request DoS

The remote host is running IBM Tivoli Provisioning Manager for OS Deployment, for remote deployment and management of operating systems. The TFTPD component of the version of this software installed on the remote host does not handle read requests with an invalid 'blksize' argument. An...

CVE-2007-3268

The TFTP implementation in IBM Tivoli Provisioning Manager for OS Deployment 5.1 before Fix Pack 3 allows remote attackers to cause a denial of service rembo.exe crash and multiple service outage via a read RRQ request with an invalid blksize blocksize, which triggers a divide-by-zero error...

Design/Logic Flaw

The TFTP implementation in IBM Tivoli Provisioning Manager for OS Deployment 5.1 before Fix Pack 3 allows remote attackers to cause a denial of service rembo.exe crash and multiple service outage via a read RRQ request with an invalid blksize blocksize, which triggers a divide-by-zero error...

CVE-2007-3268

Summary (CVE-2007-3268) : IBM Tivoli Provisioning Manager for OS Deployment (5.1 before Fix Pack 3) is affected by a DoS in the TFTPD TFTP implementation. A malformed read request (RRQ) with an invalid blksize triggers an integer division by zero, causing rembo.exe to crash and multiple services ...